Issue metadata
Sign in to add a comment
|
Security: XSS issue Google.
Reported by
gpruijss...@gmail.com,
Mar 28 2017
|
||||||||||||||||||
Issue descriptionHello, I've discovered an XSS vulnerability. This is currently led to a nulledsoftware website as I've managed to stumble upon this. Please look into this! https://www.google.com/url?sa=t&url=%68%74%74%70%3A%2F%2F%6E%75%6C%6C%65%64%73%6F%66%74%2E%72%75&usg=AFQjCNE2LEKxJ2KAF7OgetzkY1_7T9cb_Q&id=edevcimot
,
Mar 28 2017
What leads you to believe this is an XSS issue? It appears to be simply a redirection through Google.com, where the redirect URL is %-encoded (HTTP becomes %68%74%74%70 etc)? This wouldn't represent a security bug in Chrome, and Google.com does not consider open redirects a security bug: https://sites.google.com/site/bughunteruniversity/nonvuln/open-redirect
,
Mar 28 2017
,
Apr 4 2017
Closing due to lack of feedback. Google's overall vulnerability reporting program can be found here: https://www.google.com/appserve/security-bugs/m2/new?rl=&key=
,
Jul 12 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by gpruijss...@gmail.com
, Mar 28 2017